portal.admin.canonical.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:aa:97:ba:25:57:77:52:c8:5a:50:2f:ec:1b:70:9e:2c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.admin.canonical.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:aa:97:ba:25:57:77:52:c8:5a:50:2f:ec:1b:70:9e:2c
Serial Number (int): 334724323254878281783058173081827721387564
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:22:08:60:03:60:cf:12:bb:e9:12:55:cb:ec:e4:fd:f3:37:1c:60
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:53:9b:80:dc:73:fd:25:df:56:5c:0f:07:7d:c6:bc:e3:ff:cb:94
Fingerprint (sha256): 0a:71:27:ee:4a:f1:e9:46:bf:51:07:69:a7:76:93:26:d6:50:bb:49:af:5a:0b:8e:02:39:fb:f3:f2:e3:13:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate portal.admin.canonical.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.admin.canonical.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal-next.admin.canonical.com
portal.admin.canonical.com
portal2.admin.canonical.com
portal3.admin.canonical.com

Other certificates including the domain name canonical.com

(limited to 100 certificates)
cloud.kpi.canonical.com
sentry.ols.canonical.com
website.ci.canonical.com
people.canonical.com
admin.isd.canonical.com
graphite.ubunet.canonical.com
devices-nagios.admin.canonical.com
www.canonical.com
canonical-redirects3.canonical.com
cdo.okr.canonical.com
lpstats.canonical.com
expenses.canonical.com
erinyes.canonical.com
design.canonical.com
status.melodydns.com
hydrogen.canonical.com
code-review.premium-git.canonical.com
contracts.staging.canonical.com
oil-jenkins.canonical.com
files.support.canonical.com
jenkins.canonical.com
archive.landscape.canonical.com
test-blog.launchpad.net
objectstorage.prodstack4-5.canonical.com
serial-vault-partners.canonical.com
www.canonical.com
design.canonical.com
pages.canonical.com
files.support.canonical.com
oem-ibs.canonical.com
bazaar.canonical.com
private-desktop.kpi.canonical.com
lists.ubuntu.com
bandwidth.admin.canonical.com
trust.ricardo.ch
bandwidth.admin.canonical.com
status.reservecloud.com
pages.canonical.com
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
oem-share.canonical.com
partner-images.canonical.com
bazaar.canonical.com
prodstack-nagios.admin.canonical.com
partner-images.canonical.com
blog.canonical.com
livepatch.staging.canonical.com
landscape.is.canonical.com
monitoring.sicktech.online
barometz.admin.canonical.com
rocks.canonical.com
portal.admin.canonical.com
test-blog.launchpad.net
irpstatus.streamlineit.ca
bazaar.canonical.com
objectstorage.prodstack4-5.canonical.com
hyperscale-images.canonical.com
canonical-redirects2.canonical.com
jenkins.ols.canonical.com
mon02.nocoperations.com
bandwidth.admin.canonical.com
status.uk.deptagency.com
staging.forms.canonical.com
blog.bazaar.canonical.com
design.canonical.com
newsletter.canonical.com
test-blog.launchpad.net
shop.canonical.com
private-fileshare.canonical.com
pages.canonical.com
hwe.canonical.com
pages.canonical.com
cesg.canonical.com
voices.canonical.com
people.canonical.com
autocert.canonical.com
cloud.kpi.canonical.com
storm.canonical.com
landscape.is.canonical.com
expenses.canonical.com
oem-dev.canonical.com
pages.canonical.com
logging.ols.staging.canonical.com
directory.canonical.com
people.canonical.com
canonical-redirects2.canonical.com
blog.bazaar.canonical.com
files.support.canonical.com
status.savantx.io
blog.canonical.com
expenses.canonical.com
allhands.canonical.com
landscape.is.canonical.com
status.reservecloud.com
status.reservecloud.com
forms.canonical.com
certification.staging.canonical.com
auto-deploy-logs.admin.canonical.com
www.staging.canonical.com
sentry.is.canonical.com

Certificate

The complete raw certificate details for portal.admin.canonical.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISA9eql7olV3dSyFpQL+wbcJ4sMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTkyMTA0NDJaFw0x
OTEyMTgyMTA0NDJaMCUxIzAhBgNVBAMTGnBvcnRhbC5hZG1pbi5jYW5vbmljYWwu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuehwnnM24KiCvhH
teBJcuXR4lBVZogeLidqU1wKzqY9gsyjLL5+EvHzI98tqKCkFFkxvyEQhZk2QAnI
BCPWs3thq7AGNlb5fWIFRYzoupd4badLsBe1Tnd9g+TtEE+8g9CdWsofH5bx6aQ1
C7jMyf5JmyXBgAwfISmxTjn+hnBoiSNKJN6r2VGMBzgZOW0d05Kx4CoPz4arxo1y
a6pfLvqCYdk756fNoUgNoZWHNf3UBkBHA5xnMqusfByuVbQFvcoJubS5jCmbYYAr
cYupJoCwu99itV5ePVC6y6K4HSjlryOuajQAXg/JNg89mfm5IQvUgov7Sm2OIh2t
BHXaoQIDAQABo4ICzTCCAskwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRmIghgA2DP
ErvpElXL7OT98zccYDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIGABgNVHREEeTB3gh9wb3J0YWwtbmV4dC5hZG1pbi5j
YW5vbmljYWwuY29tghpwb3J0YWwuYWRtaW4uY2Fub25pY2FsLmNvbYIbcG9ydGFs
Mi5hZG1pbi5jYW5vbmljYWwuY29tghtwb3J0YWwzLmFkbWluLmNhbm9uaWNhbC5j
b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC
BIH3BIH0APIAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAW1L
jllBAAAEAwBIMEYCIQDqzejLkcOwXvakK9jTPxuu/k3yEDbYFX/pdfcoXBNYRQIh
AOxgCq/1lD7okk3t8EoS5EnVq6+CnX9/8Zpcl9dgwJXLAHcAY/Lbzeg7zCzPC3KE
J1drM6SNYXePvXWmOLHHaFRL2I0AAAFtS45XaAAABAMASDBGAiEAijRQKNofIG17
bHct5pPKcuyQgbgwuKW5lhDZu7jk8D0CIQCQ6VRXAGowgAcUPKIb8ScR9eSJmL5O
JVBuu6gPf4jUsTANBgkqhkiG9w0BAQsFAAOCAQEALevQJlBua40AUKOZu+hu5OZM
eMMTrEp7jidpN9hhoaxn71zrvkpQvasnLtkuqKCrS3XzFG2AQkcDFOo5hKl2i+wm
dj32mOGRzJa8ZICZsbvonBBEo6IkJczDWsOVG1lOn4O3L72KR1dLMkwwVpWs5RtS
8JgDkDP5/vCuKddKsvRtwd2WTnGJ6jghMko3GyTsf57mIEqnYU/I5soKXJDmNYSJ
3uPJlooHbpHNWvEYhJGmlTSwFjGu67kfYtsY6wzKPs0NpjJcbV0uYYzPGNJXXupj
ZOEQ7fytaEiAieBRTzCFjzbAW5HvDD/UpWjqVXs0PHFS6OMqJLNuj/kI4baGHA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuehwnnM24KiCvhHteBJ
cuXR4lBVZogeLidqU1wKzqY9gsyjLL5+EvHzI98tqKCkFFkxvyEQhZk2QAnIBCPW
s3thq7AGNlb5fWIFRYzoupd4badLsBe1Tnd9g+TtEE+8g9CdWsofH5bx6aQ1C7jM
yf5JmyXBgAwfISmxTjn+hnBoiSNKJN6r2VGMBzgZOW0d05Kx4CoPz4arxo1ya6pf
LvqCYdk756fNoUgNoZWHNf3UBkBHA5xnMqusfByuVbQFvcoJubS5jCmbYYArcYup
JoCwu99itV5ePVC6y6K4HSjlryOuajQAXg/JNg89mfm5IQvUgov7Sm2OIh2tBHXa
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334724323254878281783058173081827721387564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 21:04:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 21:04:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.admin.canonical.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20059874118675878822830469229718950913753723637354033842686643148408790576819521833923723724239662404033172121258321147619677707496660798524739981019983093169319732851823818041190093030534463634848228229599381259615613063645461831885500129048382527175039582977822938752365672326300111995324537152465498679471077192884669880809087764691933999903458079575758224916635685073157953983851576093965404048153568417602922784660940943455616962476294113523577807148826986928378869476693431900712015325059417426663952486470939450456313893865493533491534526079316126756884184623494106434710497229225217926921285523697098240154273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							662208600360cf12bbe91255cbece4fdf3371c60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal-next.admin.canonical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.admin.canonical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal2.admin.canonical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal3.admin.canonical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d4b8e59410000040300483046022100eacde8cb91c3b05ef6a42bd8d33f1baefe4df21036d8157fe975f7285c135845022100ec600aaff5943ee8924dedf04a12e449d5abaf829d7f7ff19a5c97d760c095cb00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d4b8e576800000403004830460221008a345028da1f206d7b6c772de693ca72ec9081b830b8a5b99610d9bbb8e4f03d02210090e95457006a308007143ca21bf12711f5e48998be4e25506ebba80f7f88d4b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002debd026506e6b8d0050a399bbe86ee4e64c78c313ac4a7b8e276937d861a1ac67ef5cebbe4a50bdab272ed92ea8a0ab4b75f3146d8042470314ea3984a9768bec26763df698e191cc96bc648099b1bbe89c1044a3a22425ccc35ac3951b594e9f83b72fbd8a47574b324c305695ace51b52f098039033f9fef0ae29d74ab2f46dc1dd964e7189ea3821324a371b24ec7f9ee6204aa7614fc8e6ca0a5c90e6358489dee3c9968a076e91cd5af1188491a69534b01631aeebb91f62db18eb0cca3ecd0da6325c6d5d2e618ccf18d2575eea6364e110edfcad68488089e0514f30858f36c05b91ef0c3fd4a568ea557b343c7152e8e32a24b36e8ff908e1b6861c